#Red_Team
Tools for Active Directory Red Teaming (outdated)
https://github.com/michaelyamout/ad-red-team
@BlueRedTeam
Tools for Active Directory Red Teaming (outdated)
https://github.com/michaelyamout/ad-red-team
@BlueRedTeam
GitHub
GitHub - michaelyamout/ad-red-team: Tools for Active Directory Red Teaming (outdated)
Tools for Active Directory Red Teaming (outdated). Contribute to michaelyamout/ad-red-team development by creating an account on GitHub.
#Red_Team
Breakout from the Seccomp Unconfined Container
https://tbhaxor.com/breakout-from-seccomp-confined-container
@BlueRedTeam
Breakout from the Seccomp Unconfined Container
https://tbhaxor.com/breakout-from-seccomp-confined-container
@BlueRedTeam
#Blue_Team
+ Open Source Package Analysis
https://github.com/ossf/package-analysis
+ Detecting VSTO Office Files with ExifTool
https://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604
@BlueRedTeam
+ Open Source Package Analysis
https://github.com/ossf/package-analysis
+ Detecting VSTO Office Files with ExifTool
https://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604
@BlueRedTeam
GitHub
GitHub - ossf/package-analysis: Open Source Package Analysis
Open Source Package Analysis. Contribute to ossf/package-analysis development by creating an account on GitHub.
#Red_Team
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
https://github.com/simysingh/RedTeam-vs-BlueTeam
@BlueRedTeam
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
https://github.com/simysingh/RedTeam-vs-BlueTeam
@BlueRedTeam
GitHub
GitHub - simysingh/RedTeam-vs-BlueTeam: Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst.
Red Team vs. Blue Team scenario in which you play the role of both pentester and SOC analyst. - simysingh/RedTeam-vs-BlueTeam
#Red_Team
+ OSripper - AV evading OSX Backdoor and Crypter Framework
https://github.com/SubGlitch1/OSRipper
+ GatewayBleeding - Tools for attacks on FHRP domains
https://github.com/necreas1ng/GatewayBleeding
@BlueRedTeam
+ OSripper - AV evading OSX Backdoor and Crypter Framework
https://github.com/SubGlitch1/OSRipper
+ GatewayBleeding - Tools for attacks on FHRP domains
https://github.com/necreas1ng/GatewayBleeding
@BlueRedTeam
GitHub
GitHub - NoahOksuz/OSRipper: AV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI
AV evading cross platform Backdoor and Crypter Framework with a integrated lightweight webUI - NoahOksuz/OSRipper
#Red_Team
BloodHound Inner Workings & Limitations: User Rights Enumeration Through SAMR & GPOLocalGroup
https://blog.compass-security.com/2022/05/bloodhound-inner-workings-part-1
@BlueRedTeam
BloodHound Inner Workings & Limitations: User Rights Enumeration Through SAMR & GPOLocalGroup
https://blog.compass-security.com/2022/05/bloodhound-inner-workings-part-1
@BlueRedTeam
#Blue_Team
Scheduled Task Tampering
https://labs.f-secure.com/blog/scheduled-task-tampering
@BlueRedTeam
Scheduled Task Tampering
https://labs.f-secure.com/blog/scheduled-task-tampering
@BlueRedTeam
#exploit
+ CVE-2022-1388:
BIG-IP F5 iControl REST vulnerability
https://github.com/numanturle/CVE-2022-1388
+ CVE-2022-1040:
Auth bypass and RCE in webmin portal of Sophos Firewall
https://github.com/cve-hunter/CVE-2022-1040-sophos-rce
@BlueRedTeam
+ CVE-2022-1388:
BIG-IP F5 iControl REST vulnerability
https://github.com/numanturle/CVE-2022-1388
+ CVE-2022-1040:
Auth bypass and RCE in webmin portal of Sophos Firewall
https://github.com/cve-hunter/CVE-2022-1040-sophos-rce
@BlueRedTeam
GitHub
GitHub - numanturle/CVE-2022-1388: K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388
K23605346: BIG-IP iControl REST vulnerability CVE-2022-1388 - numanturle/CVE-2022-1388
#exploit
Hacking a Bank by Finding a 0day in DotCMS
https://blog.assetnote.io/2022/05/03/hacking-a-bank-using-dotcms-rce
@BlueRedTeam
Hacking a Bank by Finding a 0day in DotCMS
https://blog.assetnote.io/2022/05/03/hacking-a-bank-using-dotcms-rce
@BlueRedTeam
#tools
#Red_Team
+ AD CS: weaponizing the ESC7 attack
https://www.tarlogic.com/blog/ad-cs-esc7-attack
+ An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav)
https://github.com/med0x2e/NTLMRelay2Self
+ Tools for performing attacks on EIGRP domains
https://github.com/necreas1ng/EIGRPWN
@BlueRedTeam
#Red_Team
+ AD CS: weaponizing the ESC7 attack
https://www.tarlogic.com/blog/ad-cs-esc7-attack
+ An other No-Fix LPE, NTLMRelay2Self over HTTP (Webdav)
https://github.com/med0x2e/NTLMRelay2Self
+ Tools for performing attacks on EIGRP domains
https://github.com/necreas1ng/EIGRPWN
@BlueRedTeam
Tarlogic Security
AD CS: weaponizing the ESC7 attack
Research and tooling development around the ESC7 attack at Active Directory Certificate Services (AD CS) for Red Team operations
MDE_under_hood.pdf
3 MB
#Blue_Team
"Windows Defender for Endpoint:
Lifting the veil, a look at MDE under the hood"
@BlueRedTeam
"Windows Defender for Endpoint:
Lifting the veil, a look at MDE under the hood"
@BlueRedTeam
Google releases monthly security patches for Android with fixes for 37 vulnerabilities in various components, including a fix for an actively exploited vulnerability in the Linux kernel.
Details: https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html
Details: https://thehackernews.com/2022/05/google-releases-android-update-to-patch.html
#CVE-2022-28776
Any App Can Install Any App In The Galaxy App Store
https://labs.f-secure.com/advisories/samsung-galaxy-any-app-can-install-any-app/
@BlueRedTeam
Any App Can Install Any App In The Galaxy App Store
https://labs.f-secure.com/advisories/samsung-galaxy-any-app-can-install-any-app/
@BlueRedTeam
#webshell
Making webshell and terminal supports trzsz ( trz / tsz ), which similar to rz / sz, and compatible with tmux.
https://github.com/trzsz/trzsz.js
@BlueRedTeam
Making webshell and terminal supports trzsz ( trz / tsz ), which similar to rz / sz, and compatible with tmux.
https://github.com/trzsz/trzsz.js
@BlueRedTeam
GitHub
GitHub - trzsz/trzsz.js: trzsz.js is the js version of trzsz, makes terminal built with electron and webshell to support trzsz…
trzsz.js is the js version of trzsz, makes terminal built with electron and webshell to support trzsz ( trz / tsz ). - trzsz/trzsz.js
#Red_Team
For this project, I worked on a Red Team vs. Blue Team scenario in which I played the role of both pentester and SOC analyst.
https://github.com/Jtullis316/Red-Team-vs-Blue-Team
@BlueRedTeam
For this project, I worked on a Red Team vs. Blue Team scenario in which I played the role of both pentester and SOC analyst.
https://github.com/Jtullis316/Red-Team-vs-Blue-Team
@BlueRedTeam
GitHub
GitHub - Jtullis316/Red-Team-vs-Blue-Team: I worked on a Red Team vs. Blue Team scenario in which I played the role of both penetration…
I worked on a Red Team vs. Blue Team scenario in which I played the role of both penetration tester and SOC analyst. - Jtullis316/Red-Team-vs-Blue-Team
❤1👍1